CVE-2021-27219

Description

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
2.131

Associated Vulnerability

VulnerabilityOS Platform
GLib library of C routines (USN-4759-1) libglib2.0-0_2.48.2-0ubuntu4.7_i386.debLinux
GLib library of C routines (USN-4759-1) libglib2.0-0_2.48.2-0ubuntu4.7_amd64.debLinux
GLib library of C routines (USN-4759-1) libglib2.0-0_2.66.1-2ubuntu0.1_i386.debLinux
GLib library of C routines (USN-4759-1) libglib2.0-0_2.66.1-2ubuntu0.1_amd64.debLinux
GLib library of C routines (USN-4759-1) libglib2.0-0_2.64.6-1~ubuntu20.04.2_i386.debLinux
GLib library of C routines (USN-4759-1) libglib2.0-0_2.64.6-1~ubuntu20.04.2_amd64.debLinux
GLib library of C routines (USN-4759-1) libglib2.0-0_2.56.4-0ubuntu0.18.04.7_i386.debLinux
GLib library of C routines (USN-4759-1) libglib2.0-0_2.56.4-0ubuntu0.18.04.7_amd64.debLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) glib2-debugsource-2.48.2-12.22.1.x86_64.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) glib2-lang-2.48.2-12.22.1.noarch.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) glib2-tools-2.48.2-12.22.1.x86_64.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) glib2-tools-debuginfo-2.48.2-12.22.1.x86_64.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) libgio-2_0-0-2.48.2-12.22.1.x86_64.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) libgio-2_0-0-32bit-2.48.2-12.22.1.x86_64.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) libgio-2_0-0-debuginfo-2.48.2-12.22.1.x86_64.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) libgio-2_0-0-debuginfo-32bit-2.48.2-12.22.1.x86_64.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) libglib-2_0-0-2.48.2-12.22.1.x86_64.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) libglib-2_0-0-32bit-2.48.2-12.22.1.x86_64.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) libglib-2_0-0-debuginfo-2.48.2-12.22.1.x86_64.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) libglib-2_0-0-debuginfo-32bit-2.48.2-12.22.1.x86_64.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) libgmodule-2_0-0-2.48.2-12.22.1.x86_64.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) libgmodule-2_0-0-32bit-2.48.2-12.22.1.x86_64.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) libgmodule-2_0-0-debuginfo-2.48.2-12.22.1.x86_64.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) libgmodule-2_0-0-debuginfo-32bit-2.48.2-12.22.1.x86_64.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) libgobject-2_0-0-2.48.2-12.22.1.x86_64.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) libgobject-2_0-0-32bit-2.48.2-12.22.1.x86_64.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) libgobject-2_0-0-debuginfo-2.48.2-12.22.1.x86_64.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) libgobject-2_0-0-debuginfo-32bit-2.48.2-12.22.1.x86_64.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) libgthread-2_0-0-2.48.2-12.22.1.x86_64.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) libgthread-2_0-0-32bit-2.48.2-12.22.1.x86_64.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) libgthread-2_0-0-debuginfo-2.48.2-12.22.1.x86_64.rpmLinux
SUSE-SU-2021:0801-1(SUSE Linux Enterprise Server 12-SP5 ) libgthread-2_0-0-debuginfo-32bit-2.48.2-12.22.1.x86_64.rpmLinux
Glib2 update (ELSA-2021-2147) glib2-2.56.1-9.el7_9.i686.rpmLinux
Glib2 update (ELSA-2021-2147) glib2-2.56.1-9.el7_9.x86_64.rpmLinux
Glib2-devel update (ELSA-2021-2147) glib2-devel-2.56.1-9.el7_9.i686.rpmLinux
Glib2-devel update (ELSA-2021-2147) glib2-devel-2.56.1-9.el7_9.x86_64.rpmLinux
Glib2-doc update (ELSA-2021-2147) glib2-doc-2.56.1-9.el7_9.noarch.rpmLinux
Glib2-fam update (ELSA-2021-2147) glib2-fam-2.56.1-9.el7_9.x86_64.rpmLinux
Glib2-static update (ELSA-2021-2147) glib2-static-2.56.1-9.el7_9.i686.rpmLinux
Glib2-static update (ELSA-2021-2147) glib2-static-2.56.1-9.el7_9.x86_64.rpmLinux
Glib2-tests update (ELSA-2021-2147) glib2-tests-2.56.1-9.el7_9.x86_64.rpmLinux
(RHSA-2021:2147) glib2 security update glib2-2.56.1-9.el7_9.i686.rpmLinux
(RHSA-2021:2147) glib2 security update glib2-2.56.1-9.el7_9.x86_64.rpmLinux
(RHSA-2021:2147) glib2 security update glib2-devel-2.56.1-9.el7_9.i686.rpmLinux
(RHSA-2021:2147) glib2 security update glib2-devel-2.56.1-9.el7_9.x86_64.rpmLinux
(RHSA-2021:2147) glib2 security update glib2-doc-2.56.1-9.el7_9.noarch.rpmLinux
(RHSA-2021:2147) glib2 security update glib2-fam-2.56.1-9.el7_9.x86_64.rpmLinux
(RHSA-2021:2147) glib2 security update glib2-static-2.56.1-9.el7_9.i686.rpmLinux
(RHSA-2021:2147) glib2 security update glib2-static-2.56.1-9.el7_9.x86_64.rpmLinux
(RHSA-2021:2147) glib2 security update glib2-tests-2.56.1-9.el7_9.x86_64.rpmLinux
(RHSA-2021:2170) glib2 security and bug fix update glib2-2.56.4-10.el8_4.i686.rpmLinux
(RHSA-2021:2170) glib2 security and bug fix update glib2-2.56.4-10.el8_4.x86_64.rpmLinux
(RHSA-2021:2170) glib2 security and bug fix update glib2-debugsource-2.56.4-10.el8_4.i686.rpmLinux
(RHSA-2021:2170) glib2 security and bug fix update glib2-debugsource-2.56.4-10.el8_4.x86_64.rpmLinux
(RHSA-2021:2170) glib2 security and bug fix update glib2-devel-2.56.4-10.el8_4.i686.rpmLinux
(RHSA-2021:2170) glib2 security and bug fix update glib2-devel-2.56.4-10.el8_4.x86_64.rpmLinux
(RHSA-2021:2170) glib2 security and bug fix update glib2-fam-2.56.4-10.el8_4.x86_64.rpmLinux
(RHSA-2021:2170) glib2 security and bug fix update glib2-tests-2.56.4-10.el8_4.x86_64.rpmLinux
Glib2 update (ELSA-2021-2170) glib2-2.56.4-10.el8_4.i686.rpmLinux
Glib2 update (ELSA-2021-2170) glib2-2.56.4-10.el8_4.x86_64.rpmLinux
Glib2-devel update (ELSA-2021-2170) glib2-devel-2.56.4-10.el8_4.i686.rpmLinux
Glib2-devel update (ELSA-2021-2170) glib2-devel-2.56.4-10.el8_4.x86_64.rpmLinux
Glib2-doc update (ELSA-2021-2170) glib2-doc-2.56.4-10.el8_4.noarch.rpmLinux
Glib2-fam update (ELSA-2021-2170) glib2-fam-2.56.4-10.el8_4.x86_64.rpmLinux
Glib2-static update (ELSA-2021-2170) glib2-static-2.56.4-10.el8_4.i686.rpmLinux
Glib2-static update (ELSA-2021-2170) glib2-static-2.56.4-10.el8_4.x86_64.rpmLinux
Glib2-tests update (ELSA-2021-2170) glib2-tests-2.56.4-10.el8_4.x86_64.rpmLinux
(RHSA-2021:2147)Important: security update glib2-debuginfo-2.56.1-9.el7_9.i686.rpmLinux
(RHSA-2021:2147)Important: security update glib2-debuginfo-2.56.1-9.el7_9.x86_64.rpmLinux
Glib2 update (ELSA-2021-4385) glib2-2.56.4-156.el8.i686.rpmLinux
Glib2 update (ELSA-2021-4385) glib2-2.56.4-156.el8.x86_64.rpmLinux
Glib2-devel update (ELSA-2021-4385) glib2-devel-2.56.4-156.el8.i686.rpmLinux
Glib2-devel update (ELSA-2021-4385) glib2-devel-2.56.4-156.el8.x86_64.rpmLinux
Glib2-fam update (ELSA-2021-4385) glib2-fam-2.56.4-156.el8.x86_64.rpmLinux
Glib2-tests update (ELSA-2021-4385) glib2-tests-2.56.4-156.el8.x86_64.rpmLinux
Incorrect Conversion between Numeric Types Vulnerability (CVE-2021-27219)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234